Critical severity10.0NVD Advisory· Published Sep 6, 2026

CVE-2026-86152

Description

A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely.

Affected products

Tenda/CP3llm-fuzzy
Range: 27.5.57.101

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-86152nvd
vuldb.com/submit/895353nvd
vuldb.com/vuln/399275nvd
vuldb.com/vuln/399275/ctinvd
www.tenda.com.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000